CVE-2024-0100 is a medium severity (CVSS 6.5) flaw in the tracing API of NVIDIA Triton Inference Server for Linux. A user can corrupt system files through it. NVIDIA lists releases 22.09 through 24.03 as affected and 24.04 as the fixed version.
What's affected
NVIDIA bulletin 5535 lists Triton Inference Server on Linux as affected for versions 22.09 through 24.03. Version 24.04 contains the fix. The bulletin lists denial of service and data tampering as the possible impact.
Windows is not named for this CVE in the record or the bulletin. Check the bulletin if you run a mixed estate.
How to check if you're exposed
Check the Triton image tag on each host or in each manifest.
docker images --format "{{.Repository}}:{{.Tag}}" | grep tritonserver
Tags that start with a release from 22.09 up to 24.03 are in range. Also check whether the tracing feature is turned on in your launch arguments and whether the server runs as a user that can write to sensitive paths. That tells you how much damage corrupted files could do.
What to do now
- List all Linux Triton deployments and their image tags.
- Upgrade to Triton 24.04 or later.
- Run the server as a non-root user with write access only to the directories it needs, and keep the trace output path separate.
- Restrict access to the HTTP and gRPC endpoints to trusted clients.
Why it matters
The weakness is CWE-73, external control of a file name or path. If a caller can influence which file the server writes to, the server can be steered into overwriting files it should not touch. NVIDIA says the result may be denial of service and data tampering.
The vector needs high privileges (PR:H), which explains the medium score. Still, inference servers often sit in shared clusters where API access is wider than intended. The record does not flag exploitation in the wild. Safeguard has a free in-browser dependency scan at gold.safeguard.sh/scan, and the Gold directory lists the CVE and CWE pages used here.
Quick check
Why only medium?
The NVIDIA vector requires high privileges, so an attacker already needs significant access to the Triton service.
Which version should I move to?
NVIDIA lists 24.04 as the fixed release. A later release is fine and is usually the better choice.
Sources
Last reviewed: 19 October 2026.
